Not sure if there are others who have faced this, and if there is a workaround, or an app to address below:
1. Even when the phone is locked, one can access the notification drawer, one can turn on/ off data, wifi etc.
2. The power key is usable to power off or restart the phone
This is a basic security issue as in the wrong hands they will perform above functions, and critical services like ‘Find my device’ won’t work. There are other obvious loopholes with above access
That's a very good spot, I didn't realise that you could do that. On my previous phones it wasn't possible to change these settings without unlocking the phone.